City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.21.189.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34398
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.21.189.74. IN A
;; AUTHORITY SECTION:
. 343 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 10:48:36 CST 2022
;; MSG SIZE rcvd: 10674.189.21.107.in-addr.arpa domain name pointer ec2-107-21-189-74.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
74.189.21.107.in-addr.arpa name = ec2-107-21-189-74.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 196.45.48.48 | attackspambots | fail2ban honeypot |
2019-07-02 23:16:39 |
| 173.210.1.162 | attackspambots | Jul 2 15:58:06 Ubuntu-1404-trusty-64-minimal sshd\[27236\]: Invalid user eas from 173.210.1.162 Jul 2 15:58:06 Ubuntu-1404-trusty-64-minimal sshd\[27236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.210.1.162 Jul 2 15:58:09 Ubuntu-1404-trusty-64-minimal sshd\[27236\]: Failed password for invalid user eas from 173.210.1.162 port 34611 ssh2 Jul 2 16:02:20 Ubuntu-1404-trusty-64-minimal sshd\[31098\]: Invalid user radio from 173.210.1.162 Jul 2 16:02:20 Ubuntu-1404-trusty-64-minimal sshd\[31098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.210.1.162 |
2019-07-02 23:21:20 |
| 216.45.23.6 | attackbotsspam | Jul 2 16:03:44 dev sshd\[14959\]: Invalid user ue from 216.45.23.6 port 54497 Jul 2 16:03:44 dev sshd\[14959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.45.23.6 ... |
2019-07-02 23:07:40 |
| 196.52.43.59 | attackbotsspam | Attacks repeated for more than a month |
2019-07-02 22:41:29 |
| 107.175.105.130 | attackbotsspam | Jul 2 15:27:21 unicornsoft sshd\[15198\]: Invalid user lloyd from 107.175.105.130 Jul 2 15:27:21 unicornsoft sshd\[15198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.105.130 Jul 2 15:27:22 unicornsoft sshd\[15198\]: Failed password for invalid user lloyd from 107.175.105.130 port 38094 ssh2 |
2019-07-02 23:28:05 |
| 189.8.95.30 | attackspam | Feb 24 17:00:07 motanud sshd\[26353\]: Invalid user sa from 189.8.95.30 port 59341 Feb 24 17:00:07 motanud sshd\[26353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.95.30 Feb 24 17:00:09 motanud sshd\[26353\]: Failed password for invalid user sa from 189.8.95.30 port 59341 ssh2 |
2019-07-02 23:14:40 |
| 189.79.154.28 | attack | Mar 8 06:14:37 motanud sshd\[29802\]: Invalid user ppc from 189.79.154.28 port 58236 Mar 8 06:14:37 motanud sshd\[29802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.154.28 Mar 8 06:14:39 motanud sshd\[29802\]: Failed password for invalid user ppc from 189.79.154.28 port 58236 ssh2 |
2019-07-02 23:31:56 |
| 139.199.6.107 | attackspam | 2019-07-02T17:18:21.912764cavecanem sshd[21351]: Invalid user gitgit123 from 139.199.6.107 port 46447 2019-07-02T17:18:21.915430cavecanem sshd[21351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.6.107 2019-07-02T17:18:21.912764cavecanem sshd[21351]: Invalid user gitgit123 from 139.199.6.107 port 46447 2019-07-02T17:18:23.916689cavecanem sshd[21351]: Failed password for invalid user gitgit123 from 139.199.6.107 port 46447 ssh2 2019-07-02T17:21:00.754484cavecanem sshd[21986]: Invalid user password123 from 139.199.6.107 port 56558 2019-07-02T17:21:00.757472cavecanem sshd[21986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.6.107 2019-07-02T17:21:00.754484cavecanem sshd[21986]: Invalid user password123 from 139.199.6.107 port 56558 2019-07-02T17:21:02.918913cavecanem sshd[21986]: Failed password for invalid user password123 from 139.199.6.107 port 56558 ssh2 2019-07-02T17:23:34.967752cave ... |
2019-07-02 23:31:32 |
| 180.124.28.229 | attackspambots | Brute force SMTP login attempts. |
2019-07-02 23:21:47 |
| 123.136.117.74 | attackspam | Trying to deliver email spam, but blocked by RBL |
2019-07-02 22:35:08 |
| 1.55.193.83 | attackspam | IP: 1.55.193.83 ASN: AS18403 The Corporation for Financing |
2019-07-02 23:10:58 |
| 35.221.86.234 | attackspambots | Automatic report - Web App Attack |
2019-07-02 22:49:05 |
| 111.230.241.245 | attackspambots | Jul 2 17:31:48 hosting sshd[8995]: Invalid user guillermo from 111.230.241.245 port 46768 ... |
2019-07-02 23:14:00 |
| 104.216.171.142 | attackbots | Jul 2 15:58:12 dns01 sshd[27609]: Invalid user guan from 104.216.171.142 Jul 2 15:58:12 dns01 sshd[27609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.216.171.142 Jul 2 15:58:15 dns01 sshd[27609]: Failed password for invalid user guan from 104.216.171.142 port 47872 ssh2 Jul 2 15:58:15 dns01 sshd[27609]: Received disconnect from 104.216.171.142 port 47872:11: Bye Bye [preauth] Jul 2 15:58:15 dns01 sshd[27609]: Disconnected from 104.216.171.142 port 47872 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.216.171.142 |
2019-07-02 22:33:48 |
| 190.1.201.152 | attackbots | Feb 27 03:54:08 motanud sshd\[14173\]: Invalid user livia from 190.1.201.152 port 46556 Feb 27 03:54:08 motanud sshd\[14173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.1.201.152 Feb 27 03:54:10 motanud sshd\[14173\]: Failed password for invalid user livia from 190.1.201.152 port 46556 ssh2 |
2019-07-02 22:47:16 |